Storychief vulnerabilities
We track 1 vulnerability in Storychief products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 16, 2025.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Storychief vulnerabilities
- 9.8 Critical severity
StoryChief: Unrestricted Upload of File with Dangerous Type
The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.0.42. This vulnerability occurs through the /wp-json/storychief/webhook REST-API endpoint that does not have sufficient filetype validation. Thi